Forum Discussion

Daniel Piedra's avatar
Daniel Piedra
Icon for Microsoft rankMicrosoft
Nov 21, 2020

AS400 CEF Sentinel

Hello Community experts,    We have started working on PoCs with partners for two different customers in the finance industry that are in need to monitor AS400 systems. They will be collecting th...
  • Daniel Piedra's avatar
    Daniel Piedra
    Oct 21, 2021

    Hi JKatzmandu, thanks for your response, we were able to configure it by using a 3rd party tool to convert CEF format to Syslog format and then forward the logs to a relay VM installed onprem with a Syslog agent and Log Analytics Agent for Linux and from there successfully ingested the logs to Log Analytics Workspace for Sentinel use. 

Daniel Piedra's avatar
Daniel Piedra
Icon for Microsoft rankMicrosoft
Oct 21, 2021

Hi JKatzmandu, thanks for your response, we were able to configure it by using a 3rd party tool to convert CEF format to Syslog format and then forward the logs to a relay VM installed onprem with a Syslog agent and Log Analytics Agent for Linux and from there successfully ingested the logs to Log Analytics Workspace for Sentinel use. 

desgoh's avatar
desgoh
Copper Contributor
Oct 15, 2023

Hi Daniel Piedra, can you share the steps and 3rd party tools that you used to send logs from AS400 to Sentinel please?

Resources